@Zalparus

Unmasking Hidden Backdoors: How I Traced a Webshell Dropper in a PHP App

Sep 23, 2025 · 5 min read · Good day, security enthusiasts and professionals. Welcome back to my blog. In today’s write-up, I’ll walk you through how I uncovered a hidden path attackers were using to upload web shells on a client’s PHP application. This particular application d...

Tryhackme Smol Challenge ( Medium level CTF)

Sep 20, 2025 · 3 min read · Smol is a vulnerable WordPress application with outdated plugins connected to it. The first step in solving a CTF is to usually read the description thoroughly. In order to have an idea of how to effectively walkthrough. This is the description. Fro...

1

How i was able to exploit a vulnerable payment system.

Jun 3, 2025 · 2 min read · Hello hackers and security enthusiasts, we are here again to serve you dinner in a 5-star hotel 😊. Hope you enjoy it !!!. LITTLE BIO ABOUT ME I’m David, a software developer and cybersecurity researcher who specializes in application security. I spe...

TTaji commented

How i was able to abuse XML-RPC to get Origin IP.

May 17, 2025 · 2 min read · What is XML-RPC XML-RPC stands for "XML Remote Procedure Call". It’s a protocol that allows software running on different operating systems or written in different programming languages to make procedure calls over a network (usually HTTP). How it wo...

JWT misconfiguration and PII sensitive information leak

May 5, 2025 · 3 min read · Hi guys, Its David again, your favorite software developer and Security Researcher. I am back again with another report for you. Like i promised, i would make sure to be documenting all my bug findings. Had a busy week, so i utilized the weekend to m...